{"id":"https://openalex.org/W4389077265","doi":"https://doi.org/10.1109/icmlc58545.2023.10327974","title":"Improving the Adversarial Robustness of Deep Neural Networks via Efficient Two-Stage Training","display_name":"Improving the Adversarial Robustness of Deep Neural Networks via Efficient Two-Stage Training","publication_year":2023,"publication_date":"2023-07-09","ids":{"openalex":"https://openalex.org/W4389077265","doi":"https://doi.org/10.1109/icmlc58545.2023.10327974"},"language":"en","primary_location":{"id":"doi:10.1109/icmlc58545.2023.10327974","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icmlc58545.2023.10327974","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Conference on Machine Learning and Cybernetics (ICMLC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115595561","display_name":"Ran Wang","orcid":"https://orcid.org/0000-0002-3606-3527"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ran Wang","raw_affiliation_strings":["College of Mathematics and Statistics, Shenzhen University,Shenzhen,China,518060"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Mathematics and Statistics, Shenzhen University,Shenzhen,China,518060","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingyu Xiong","orcid":null},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyu Xiong","raw_affiliation_strings":["College of Mathematics and Statistics, Shenzhen University,Shenzhen,China,518060"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Mathematics and Statistics, Shenzhen University,Shenzhen,China,518060","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102775218","display_name":"Haopeng Ke","orcid":null},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haopeng Ke","raw_affiliation_strings":["College of Mathematics and Statistics, Shenzhen University,Shenzhen,China,518060"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Mathematics and Statistics, Shenzhen University,Shenzhen,China,518060","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013880628","display_name":"Yuheng Jia","orcid":"https://orcid.org/0000-0002-3907-6550"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuheng Jia","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University,Nanjing,China,211189"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University,Nanjing,China,211189","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032665783","display_name":"Debby D. Wang","orcid":"https://orcid.org/0000-0002-3755-8943"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Debby D. Wang","raw_affiliation_strings":["School of Science and Technology, Hong Kong Metropolitan University,Kowloon,Hong Kong","School of Science and Technology, Hong Kong Metropolitan University, Kowloon, Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Science and Technology, Hong Kong Metropolitan University,Kowloon,Hong Kong","institution_ids":[]},{"raw_affiliation_string":"School of Science and Technology, Hong Kong Metropolitan University, Kowloon, Hong Kong","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"43","last_page":"49"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9585999846458435,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9146000146865845,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.9066482782363892},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7377302050590515},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7337360978126526},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7238932847976685},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6828722357749939},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.68280428647995},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.6596143841743469},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.6217505931854248},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5304262638092041},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5031177401542664},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.47517719864845276},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.45976394414901733},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.45505648851394653},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.43121224641799927},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.34892696142196655}],"concepts":[{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.9066482782363892},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7377302050590515},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7337360978126526},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7238932847976685},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6828722357749939},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.68280428647995},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.6596143841743469},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6217505931854248},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5304262638092041},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5031177401542664},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.47517719864845276},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.45976394414901733},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.45505648851394653},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.43121224641799927},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.34892696142196655},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icmlc58545.2023.10327974","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icmlc58545.2023.10327974","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Conference on Machine Learning and Cybernetics (ICMLC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5393213552","display_name":null,"funder_award_id":"62176160,62203304","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2180612164","https://openalex.org/W2774644650","https://openalex.org/W2962898354","https://openalex.org/W2963166243","https://openalex.org/W2963857521","https://openalex.org/W2969985801","https://openalex.org/W2983219069","https://openalex.org/W4293846201","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6729756640","https://openalex.org/W6763194189"],"related_works":["https://openalex.org/W2950183588","https://openalex.org/W3080754722","https://openalex.org/W2618574054","https://openalex.org/W3093978547","https://openalex.org/W3203790781","https://openalex.org/W2997056298","https://openalex.org/W2738001131","https://openalex.org/W4285785480","https://openalex.org/W3127875750","https://openalex.org/W4383221314"],"abstract_inverted_index":{"Despite":[0],"the":[1,9,38,49,61,65,70,74,83,105,118,121,125,130,133,172],"widespread":[2],"applications":[3],"of":[4,12,41,82,174],"deep":[5,126],"neural":[6],"networks":[7],"(DNNs),":[8],"potential":[10],"threats":[11],"adversarial":[13,39,95,136],"examples":[14],"remain":[15],"considerable":[16],"concerns.":[17],"In":[18],"this":[19],"paper,":[20],"we":[21],"propose":[22],"a":[23,30,53,99,145],"new":[24],"proactive":[25],"defense":[26],"method":[27,88,115],"based":[28],"on":[29,150,155],"two-stage":[31],"training":[32],"procedure":[33],"in":[34,140,144],"order":[35],"to":[36,47,93,103],"enhance":[37],"robustness":[40,137],"DNNs.":[42],"The":[43],"first":[44],"stage":[45,63],"intends":[46],"map":[48],"input":[50],"samples":[51],"into":[52],"feature":[54,66,127],"embedding":[55,141],"space":[56],"with":[57],"high":[58],"separability,":[59],"while":[60],"second":[62],"fixes":[64],"generator":[67,128],"and":[68,129,138,163,165],"learns":[69],"parameters":[71],"only":[72],"for":[73,77,124],"last":[75],"layer":[76],"classification.":[78],"Different":[79],"from":[80,168],"most":[81],"existing":[84],"state-of-the-art":[85],"methods,":[86],"our":[87,114,175],"neither":[89],"spends":[90],"extensive":[91],"costs":[92],"generate":[94],"information,":[96],"nor":[97],"constructs":[98],"complex":[100],"penalty":[101],"function":[102],"force":[104],"model":[106],"satisfying":[107],"specific":[108],"restrictions":[109],"under":[110],"subjective":[111],"assumptions.":[112],"Instead,":[113],"cuts":[116],"off":[117],"interactions":[119],"between":[120,135],"parameter":[122],"updating":[123],"classifier,":[131],"discovers":[132],"relationship":[134],"separability":[139],"space,":[142],"results":[143],"better":[146],"interpretability.":[147],"Substantial":[148],"experiments":[149],"various":[151],"network":[152],"structures":[153],"deployed":[154],"benchmark":[156],"data":[157],"sets":[158],"including":[159],"MNIST,":[160],"FASHION":[161],"MNIST":[162],"CIFAR10":[164],"their":[166],"adversary":[167],"different":[169],"attacks":[170],"demonstrate":[171],"rationality":[173],"method.":[176]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}